Cryptographic operation

Patent metadata

Field	Value
Publication number	US-11627002-B2
Application number	US-202117316146-A
Country	US
Kind code	B2
Filing date	May 10, 2021
Priority date	May 15, 2020
Publication date	Apr 11, 2023
Grant date	Apr 11, 2023

Abstract

A method is suggested for providing a response, wherein the method comprises: obtaining a challenge from a host, determining the response based on the challenge, determining an auxiliary value based on the response or the challenge, providing the auxiliary value to the host, obtaining a random value from the host, checking the validity of the challenge based on the random value, and providing the response to the host only if the challenge is valid. Also, according methods running on the host and system are provided. Further, corresponding devices, hosts and systems are suggested.

First claim

What is claimed is:

1. A method for providing a response comprising:
obtaining a challenge from a host,
determining the response based on the challenge,
determining an auxiliary value based on the response or the challenge,
providing the auxiliary value to the host,
obtaining a random value from the host,
checking the validity of the challenge based on the random value, and
providing the response to the host only if the challenge is valid.

2. The method according to claim 1 , wherein the response is configured such that the host is able to verify the validity of the originator.

3. The method according to claim 1 , wherein determining the response and checking the validity of the challenge each utilize at least one cryptographic Lattice operation.

4. The method according to claim 1 , wherein the response is determined based on at least cryptographic operation.

5. The method according to claim 1 , wherein the auxiliary value is determined using a one-way function.

6. The method according to claim 1 , wherein the auxiliary value is determined based on an additional value (μ) and wherein the additional value (μ) is conveyed to the host.

7. The method according to claim 1 , wherein the method is used on a security device or for operating a security device, wherein such security device comprises at least one of the following:
an integrated circuit,
a hardware security module,
a trusted platform module,
a crypto unit,
a FPGA,
a processing unit,
a controller,
a smartcard.

8. A method for authenticating a device to a host comprising:
at the host, determining a challenge based on a random value and providing the challenge to the device;
at the device, obtaining the challenge from the host, determining a response based on the challenge, determining an auxiliary value based on the response or the challenge, and providing the auxiliary value to the host;
at the host, obtaining the auxiliary value from the device, providing the random value to the device;
at the device, obtaining the random value from the host, checking the validity of the challenge based on the random value, providing the response to the host only if the challenge is valid; and
at the host, obtaining a response from the device and authenticating the device if the response corresponds to the auxiliary value.

9. A security device comprising:
interface circuitry; and
processing circuitry operatively connected to the interface circuitry and configured to:
obtain a challenge from a host, via the interface circuitry,
determine the response based on the challenge,
determine an auxiliary value based on the response or the challenge,
provide the auxiliary value to the host, via the interface circuitry,
obtain a random value from the host, via the interface circuitry,
check the validity of the challenge based on the random value, and
provide the response to the host only if the challenge is valid.

Assignees

• Infineon Technologies Ag

Inventors

• Poeppelmann Thomas
• Urian Rainer

Classifications

• H04L9/3271 Primary

  using challenge-response · CPC title

• H04L9/0877

  using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM] · CPC title

• H04L9/3093

  involving Lattices or polynomial equations, e.g. NTRU scheme · CPC title

• H04L9/0643 Primary

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L9/003

  for power analysis, e.g. differential power analysis [DPA] or simple power analysis [SPA] · CPC title